Static task
static1
Behavioral task
behavioral1
Sample
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
Resource
win10v2004-20241007-en
General
-
Target
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
-
Size
3KB
-
MD5
68852f4183e4b04ba78ed1f2c2124b7a
-
SHA1
5aa806c168daaee3333f0a4090c4f2f3199cae21
-
SHA256
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a
-
SHA512
2ed2220bde3f7bbd35582d865a43dcb580a1fc29741e8f2b302faed4615296acb8301f2cc8c664b2d336794ee411bc9c1e7473f863994f51967a6a488798f8b2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe
Files
-
39d96371da137f3de9f366d0f8bced63269e9759dd432b0b608978ce06ef525a.exe.exe windows:4 windows x86 arch:x86
b9b860358bb561fbfe75bcb7b279f20d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntdll
strlen
memset
kernel32
OutputDebugStringA
GetTickCount
VirtualAlloc
OpenProcess
msvcrt
malloc
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 512B - Virtual size: 290B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ